Vulnerability Details CVE-2005-3704
System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://docs.info.apple.com/article.html?artnum=302847
- http://secunia.com/advisories/17813
- http://securitytracker.com/id?1015293
- http://www.osvdb.org/21277
- http://www.securityfocus.com/bid/15647
- http://www.vupen.com/english/advisories/2005/2659
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23344
- http://docs.info.apple.com/article.html?artnum=302847
- http://secunia.com/advisories/17813
- http://securitytracker.com/id?1015293
- http://www.osvdb.org/21277
- http://www.securityfocus.com/bid/15647
- http://www.vupen.com/english/advisories/2005/2659
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23344
Products affected by CVE-2005-3704
-
cpe:2.3:o:apple:mac_os_x:10.4
-
cpe:2.3:o:apple:mac_os_x:10.4.1
-
cpe:2.3:o:apple:mac_os_x:10.4.2
-
cpe:2.3:o:apple:mac_os_x:10.4.3
-
cpe:2.3:o:apple:mac_os_x_server:10.4
-
cpe:2.3:o:apple:mac_os_x_server:10.4.1
-
cpe:2.3:o:apple:mac_os_x_server:10.4.2
-
cpe:2.3:o:apple:mac_os_x_server:10.4.3